Semiconductor integrated circuit and IC card system

ABSTRACT

A semiconductor integrated circuit capable of protection from card hacking, by which erroneous actions are actively induced by irradiation with light and protected secret information is illegitimately acquired, is to be provided. Photodetectors, configured by a standard logic process, hardly distinguishable from other circuits and consumes very little standby power, are mounted on a semiconductor integrated circuit, such as an IC card microcomputer. Each of the photodetectors, for instance, has a configuration in which a first state is held in a static latch by its initializing action and reversal to a second state takes place when semiconductor elements in a state of non-conduction, constituting the static latch of the first state, is irradiated with light. A plurality of photodetectors are arranged in a memory cell array. By incorporating the static latch type photodetector into the memory array, they can be arranged inconspicuously. Reverse engineering by irradiation with light can be effectively prevented.

BACKGROUND OF THE INVENTION

The present invention relates to a semiconductor integrated circuit andan IC card, and more particularly to a technique that can be effectivelyapplied to, for instance, the prevention of reverse engineering of acryptographic key or the like held by a semiconductor integratedcircuit, such as a microcomputer for IC cards.

Along with the development of semiconductor technology, it has become acommon practice to settle accounts in a safe and secure way byincorporating integrated circuits (ICs) into credit cards, securities orthe like and communicating account information in an encrypted form.This IC-based method makes it more difficult to forge a paper or useanother person's name than the conventional method of using magneticrecords, and as such is beneficial to both end users and serviceproviders.

Cryptographic algorithms have been studied for many years, making itextremely difficult to infer a cryptographic key from signals obtainedby tapping a communication line, and this risk is virtually negligible.A real problem, however, is posed by attempts to open an IC andreverse-engineering it to directly read internal information or acryptographic key contained in the IC. Reverse engineering is atechnique or an act to analyze the structure and/or specifications of ahardware or software product and thereby and thereby reveal thetechnical information contained.

Previously devised reverse engineering techniques was to read internalinformation or a cryptographic key contained in an IC card by supplyinga clock of an illegitimate frequency to the card, abruptly raising orreducing the voltage of power supply to it or irradiating it with apowerful electromagnetic wave to abnormally operate the IC card. On thepart of the IC card, such intrusions were fought back by detecting suchabnormal states, and preventing internal information or thecryptographic key from being read out on the basis of the detected acts.

For instance, according to a technique described in Patent Reference 1,an IC chip for an IC card is provided with an unsealing sensor and, ifit detects unsealing, a CPU will erase data in the memory to ensure safeprotection of secrets.

Patent Reference 2 describes a technique according to which a small holeis bored in a part of a package to seal and shadow the circuitconfiguration so that only the sensor part for light detection beilluminated with a light and the circuit can operate normally only whenthe light is detected. Since an unauthorized analyst would open thepackage in a dark place to avoid adverse impacts of light, the circuitwould operate differently from its usual way in a state in which nolight is detected. This different operation makes impossible analysis ofthe normal operation of the circuit and accordingly illegitimate readingof the stored information.

Patent Reference 3 discloses a technique according to which a pluralityof light receiving elements are integrated on an IC in a distributiveway, and each of the plurality of light receiving elements is connectedto one of a connection line connected to a nonvolatile memory cell, aconnection line connected to a logic circuit and a connection lineconnected to a logic element and, by intercepting, establishingconduction of or grounding these connection lines, the circuits relatedto the respective connection lines are inhibited from normally operatingso that the internal information contained in the IC can be protectedeven if it is unsealed.

Patent Reference 1: Japanese Published Unexamined Patent Application No.Hei 10 (1998)-320293

Patent Reference 2: Japanese Published Unexamined Patent Application No.2000-216345 (paragraphs 0009 through 0011)

Patent Reference 3: Japanese Published Unexamined Patent Application No.Hei 11 (1999)-102324

SUMMARY OF THE INVENTION

However, the techniques disclosed in these references give no regard tothe new card hacking contrivance of actively inducing erroneous actionsby irradiation with light and analyzing the result by a statisticaltechnique. The inventor studied how it can be prevented. In recentyears, a new technique of reverse-engineering an IC card has beenproposed by which the IC is unsealed and erroneous actions are inducedby irradiation with powerful light. To counter it, a sensor that candetect the irradiation of an IC card with light has to be developed.

Semiconductor active elements are usually integrated on an IC includediodes, bipolar transistors and metal oxide semiconductor field effecttransistors (MOSFETs). The voltage and current characteristics of everytype of them heavily depend of the characteristics of the pn junction,which is the boundary between a p-type semiconductor and an n-typesemiconductor.

In a p-type semiconductor, positive holes where positive charges aredominant among moving charges are dominant, while in an n-typesemiconductor free electrons having negative charges are dominant. Thepositive holes and free electrons are collectively called carriers. In apn junction, there emerges a region which is known as a depletion layerwhere the probability of the existence of carriers is extremely lowbecause positive holes and free electrons are recombined there.

When the potential of the p-type semiconductor is high and that of then-type semiconductor is low in a pn junction (a state known as forwardbias), positive holes in the p-type semiconductor are accelerated by theelectric field and flow into the depletion layer. Similarly, freeelectrons in the n-type semiconductor are also accelerated by theelectric field and flow into the depletion layer. In the depletionlayer, positive holes and free electrons are recombined. As thisphenomenon occurs continually, a current flows in a forward biasedstate.

Conversely, when the potential of the p-type semiconductor is low andthat of the n-type semiconductor is high (a state known as reversebias), positive holes in the p-type semiconductor and free electrons inthe n-type semiconductor do not flow into the depletion layer becausethe direction of the electric field is against them. Further, ascarriers hardly exist in the depletion layer, no carriers flow out ofthe depletion layer. As a result, a current scarcely flows in areversely biased state.

Generally, a semiconductor logic circuit uses a bipolar transistor or aMOSFET as a switch, and a high resistance in a reversely biased state isin a state of non-conduction (OFF). Supposing here a case in which lightcomes incident on a depletion layer in a reversely biased state. Whenhigh energy (short wavelength) photons collide against valence electronsin the semiconductor, the valence electrons are excited to become freeelectrons, and regions having lost electrons and acquired positivecharges become positive holes. Thus the incidence of light gives rise topaired positive holes and free electrons. The generated positive holesare accelerated by the electric field, flow out to the p-typesemiconductor, while the free electrons flow out to the n-typesemiconductor. As long as light continues to come incident, thegeneration of positive holes and free electrons continues, and thereforea current flows in a reverse bias to the pn junction when light comesincident.

If the electric field working on the depletion layer is sufficientlylarge and the paired positive holes and free electrons that have beengenerated are scarcely recombined and flow out of the depletion layer,the amplitude of the current will be proportional to the number ofphotons having come incident. Thus by bringing to incidence sufficientlypowerful light, it will be made possible to let flow a larger current tothe switching element of a semiconductor in an OFF state than to theswitching element of a semiconductor in an ON state, and the circuit canbe induced to commit erroneous actions. By actively inducing erroneousactions in this way, the erroneous actions may let out information whichshould not be supplied, and a statistical analysis of such informationmay make possible card hacking.

An object of the present invention is to provide a semiconductorintegrated circuit, and further an IC card, that can be protectedagainst the way of card hacking by which erroneous actions are activelyinduced by irradiation with light and thereby protected secretinformation is illegitimately acquired.

The above-described and other objects and novel features of theinvention will become more apparent from the following description inthis specification when taken in conjunction with the accompanyingdrawings.

Typical aspects of the invention disclosed in this application will bebriefly described below.

[1] Usually an IC is designed not to let internal information or acryptographic key be directly supplied outside if it is operatingnormally. However, it is difficult to fully protect internal informationor a cryptographic key in a state in which the circuit is operatingerroneously. An effective technique therefore would be to preventinternal information or a cryptographic key from being suppliedexternally by stopping the operation of the circuit if irradiation withlight is detected (for instance by initializing the internal state witha reset instruction and keeping that reset instruction in effectcontinuously).

This would require a photodetector. As a semiconductor element fordetecting light, usually a photodiode for use in a semiconductor imagepickup element or the like is thought of. However, since no photodiodeis made available in a usual logic process, using a photodiode wouldmean an extra cost. Moreover, the use of a peculiar element such as aphotodiode would make the location of the photodetector readilyidentifiable. Once it is known, the photodetector can be masked by metaldeposition with a field ion beam (FIB) or otherwise, and therefore thisis not a secure enough defense.

Further, in anticipation of the convenience after the IC card is mountedon a mobile device or the like, the smaller the power consumption of theIC card itself, the more desirable it is. Since a photodetector has nopurpose to serve during the normal operation of the circuit, its standbypower consumption should preferably be close to zero.

In view of this point, it is intended to effectively prevent asemiconductor integrated circuit, such as an IC card microcomputer, frombeing reverse-engineered by irradiation with light by mounting aphotodetector which (1) is configured of a standard logic process, (2)is difficult to be distinguished from other circuits and (3) consumesvery little power when standing by. The following means are used toachieve this purpose.

[2] (Static latch type) A semiconductor integrated circuit according tothe present invention holds a static latch in a first state in itsinitial state, and has in a memory cell array a photodetector which,when a photo-detecting semiconductor element in a state ofnon-conduction constituting the static latch in the first state isirradiated with light, is reversed into a second state, whereinphoto-detection by the photodetector is used for stopping internalactions. By assembling the static latch type photodetector into thememory array, the photodetector can be arranged inconspicuously.

In a specific mode of implementing the invention, the photo-detectingsemiconductor element in a state of non-conduction is a MOS transistorconstituting a static latch. In another mode, a diode element isprovided as the photo-detecting semiconductor element, wherein the diodeelement is connected in a reverse bias in parallel with the MOStransistor.

In the optimum mode, wherein the memory cell array has a SRAM module inwhich static type memory cells are arranged in a matrix, and a pluralityof the photodetectors are distributively arranged in the memory cellarray of the SRAM module in place of some of the static type memorycells.

Although there are no memory cells where there are photodetectors, it ispossible to use a redundant configuration which can compensate for thelack of static type memory cells. Alternatively, an ECC circuit may beused that can detect and correct data errors resulting from the absenceof static type memory cells replaced by the photodetectors.

(Push-pull type) A semiconductor integrated circuit according to asecond aspect of the invention is provided with a plurality ofphotodetectors each having a semiconductor element and a photo-detectingsemiconductor element arranged in series on a current path andrespectively placed in a state of conduction and in a state ofnon-conduction when they are operable, wherein the potential of theconnection point between the semiconductor element in the state ofconduction and the photo-detecting semiconductor element in the state ofnon-conduction varies according to the ratio between a current drivingforce which varies when the photo-detecting semiconductor element in thestate of non-conduction is irradiated with light and the current drivingforce of the semiconductor element in the state of conduction, andphoto-detection by the photodetectors is used for stopping internalactions. A plurality of photodetectors should preferably arrangeddistributively when applied to a logic circuit module operated insynchronism with a clock signal. Photodetectors of a push-pull type areinconspicuous relative to the logic circuit, and accordingly thepositions of their presence are not easily perceivable.

In a specific mode of the invention, the photo-detecting semiconductorelement in the state of non-conduction is a MOS transistor.Alternatively, the photo-detecting semiconductor element in the state ofnon-conduction is a diode element connected in a reverse bias on thecurrent path.

(Differential sensitivity type) A semiconductor integrated circuitaccording to a third aspect of the invention is provided with a firstcircuit having a semiconductor element for sensitivity adjustment on acurrent path, a second circuit whose photo-detection sensitivity isadjusted by the first circuit and which has a photo-detectingsemiconductor element on the current path, and a third circuit fordetecting the output node level of the second circuit. The semiconductorintegrated circuit further comprises a plurality of photodetectors forvarying the output of the third circuit according to the output nodelevel of the second circuit which is subject to current variations whenthe photo-detecting semiconductor element is irradiated with light,wherein photo-detection by the photodetectors is used for stoppinginternal actions. Preferably, the plurality of photodetectors should bedistributively arranged in a power supply circuit and a clock generatingcircuit. The locations of photodetectors of the differential sensitivitytype, because of their circuit form in which a feedthrough current islet flow all the time, cannot be easily known even if they are arrangedwithin an analog circuit. It is preferable to make adjustable thecurrent driving force of the semiconductor element for sensitivityadjustment. It would facilitate correaction or optimization of thedetection sensitivity.

In a specific mode of implementing the invention, for instance, thephoto-detecting semiconductor element is a MOS transistor constitutingthe current path. Alternatively, the photo-detecting semiconductorelement may be a diode element arranged in parallel on part of thecurrent path of the second circuit, and the diode element is connectedin a reverse bias. Photo-detection is further ensured by arranging aplurality of the diode elements in parallel. In this sense, it ispreferable for the plurality of diode elements to be ubiquitous on thesemiconductor chip of the semiconductor integrated circuit.

(Ensuring reliable photo-detection) In order to increase the currentdriving force or the amperage of only the photo-detecting element byirradiation with light sufficiently to distinguish it from otherelements, the area of the pn junction part to be reversely biased, outof the whole pn junction of the photo-detecting semiconductor element,should be made larger than those of other junctions to make itsphoto-sensitivity higher than those of other similar semiconductorelements. Alternatively, a metal film or polysilicon film can be used toshade the upper layers of other semiconductor elements than thephoto-detecting semiconductor element. A configuration in which, asdescribed above, diodes can be connected in parallel, biased in areverse direction to MOS transistors, as photo-detecting semiconductorelements, or another configuration in which the static latch isconnected to the power source potential and the ground potential of thecircuit via a current limiter semiconductor element can also contributeto securing the reliability of photo-detecting actions.

(Arrangement of photodetectors) The photodetectors can be arranged ingaps arising from the layout of basic cells in each circuit module. As aresult, those photodetectors are arranged at random in each circuitmodule.

Before laying out basic cells in each circuit module, the photodetectorsmay be arranged in advance in a regular pattern, such as a grid shape,in each circuit module. As the photodetectors are arranged regularly inadvance, it is made possible to adjust the density of thephotodetectors. However, this may give rise to unnecessary gaps betweenthe basic cells, inviting an increasing tendency of the space occupiedon the chip.

In order to enable the photodetectors to be readily arranged in highdensity, it is advisable to use basic cells in which basic elements ofthe logic circuit and the photodetectors are paired.

(Optimization of photodetectors relative to circuit module) Asemiconductor integrated circuit according to another aspect of thepresent invention holds a static latch in a first state in its initialstate, and has in a memory cell array a plurality of firstphotodetectors which, when a photo-detecting semiconductor element in astate of non-conduction constituting the static latch in the first stateis irradiated with light, are reversed into a second state, whereinphoto-detection signals provided by the first photodetectors are usedfor stopping internal actions. The semiconductor integrated circuit isfurther provided, in a logic circuit module, with a plurality of secondphotodetectors each having a semiconductor element and a photo-detectingsemiconductor element arranged in series on a current path andrespectively placed in a state of conduction and in a state ofnon-conduction when they are operable, wherein the potential of theconnection point between the semiconductor element in the state ofconduction and the photo-detecting semiconductor element in the state ofnon-conduction varies according to the ratio between a current drivingforce which varies when the photo-detecting semiconductor element in thestate of non-conduction is irradiated with light and the current drivingforce of the semiconductor element in the state of conduction, andphoto-detection by the second photodetectors is used for stoppinginternal actions.

The semiconductor integrated circuit may also be provided with a firstcircuit having a semiconductor element for sensitivity adjustment on acurrent path, a second circuit having a photo-detecting semiconductorelement on the current path, and a third circuit for detecting theoutput node level of the second circuit, and further provided in ananalog circuit with a plurality of third photodetectors for varying theoutput of the third circuit according to the output node level of thesecond circuit which strides over the logical threshold of the thirdcircuit according to the current which varies when the photo-detectingsemiconductor element is irradiated with light, wherein photo-detectionby the third photodetectors is used for stopping internal actions.

It may be also provided with a reset circuit capable of making thelogical sum signal of photo-detection signals provided by individualphotodetectors a reset signal. Resetting on every occasion ofphoto-detection would make it difficult to actively induce erroneousactions and thereby illegitimately acquire protected secret information.

An IC card according to the invention has, over a card substrate, anexternal interfacing section and a semiconductor integrated circuitconnected to the external interfacing section.

Typical aspects of the invention disclosed in this application will bebriefly described below.

Thus, photodetectors can be configured by utilizing the phenomenon that,by irradiating with light a semiconductor element which is stable in theoff state of a static latch, that static latch is reversed. Byincorporating static latch type photodetector into a memory array, thephotodetectors can be arranged inconspicuously. Although there will beno memory cells in the parts where the photodetectors are present,normal memory functions can be ensured by using a redundant or ECCcircuit.

If a configuration in which the output of a push-pull type circuit ismade reversible by irradiating its semiconductor element in a state ofnon-conduction with light is applied to photodetectors, they can bearranged inconspicuously in a logic circuit.

If a configuration in which a current flowing in a semiconductor elementfor sensitivity adjustment arranged on a current path is varied inoutput according to a current which is varied by irradiation of thephoto-detecting semiconductor element with light is applied tophotodetectors, they can be arranged inconspicuously in analog circuits,such as a power supply circuit, or a clock generating circuit.

By covering the photo-detecting semiconductor element of a photodetectorwith metal or the like, the operation of the photodetector can be madeeven more reliable. Sensitivity adjustment of the photodetector can beaccomplished by adjusting the square measure of the reversely biased pnjunction part of the photo-detecting semiconductor element, addition ofa diode or diodes, limiting the current, or W/L adjustment of MOStransistors for current comparison with photo-detecting MOS transistors.

By using the semiconductor integrated circuit in an IC card or the like,protection from card hacking by which erroneous actions of asemiconductor integrated circuit are actively induced to illegitimatelyacquire protected secret information can be made possible.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a circuit diagram illustrating an example of SRAM typephotodetector, which is a first preferred embodiment of the presentinvention.

FIG. 2 illustrates an example of pattern of shading with a metal filmother parts than the photo-detecting elements of the SRAM typephotodetector.

FIG. 3 illustrates the operation that takes place when photons comeincident on a MOS transistor in an off state.

FIG. 4 is a block diagram illustrating the state of a SRAM beingincorporated into a SRAM type photodetector and the overallconfiguration of a SRAM module.

FIG. 5 is a circuit diagram of a diodes-augmented SRAM typephotodetector.

FIG. 6 is a circuit diagram of a current limiters-augmented SRAM typephotodetector.

FIG. 7 is a circuit diagram of an inverter type photodetector.

FIG. 8 is a circuit diagram of a biased inverter type photodetector.

FIG. 9 is a circuit diagram of a current mirror type photodetector.

FIG. 10 is a circuit diagram of a differential AMP-type photodetector.

FIG. 11 is a circuit diagram of a modified version of the biasedinverter type photodetector 800 shown in FIG. 8.

FIG. 12 is a block diagram illustrating a schematic configuration of anIC card microcomputer into which various photodetectors areincorporated.

FIG. 13 shows a layout of a typical state in which photodetectors areincorporated into gaps in the element arrangement of functional blocks.

FIG. 14 shows a layout of a typical state in which photodetectors areincorporated into functional blocks in a grid-shaped pattern.

FIG. 15 is a circuit diagram of a typical basic cell in which aphotodetector is incorporated with a D-type flip-flop.

FIG. 16 is an overall block diagram of an IC card microcomputer to whichvoltage detecting, frequency detecting and wiring cutoff detectingfunctions are added to the photo-detection function by a photodetector.

FIG. 17 shows how active shield wiring is laid all over the surface ofan IC card microcomputer as a fine pattern.

FIG. 18 illustrates an example of circuit configuration for integrallygenerating a reset signal in response to photo-detection by aphotodetector, voltage detection, frequency detection and wiring cutoffdetection.

FIG. 19 is a plan of a typical appearance of an IC card of a contactinterfacing type.

FIG. 20 is a plan of a typical appearance of an IC card of a non-contactinterfacing type.

FIG. 21 is a circuit diagram showing a photodetector, which is amodified version of the inverter type photodetector shown in FIG. 7.

FIG. 22 is a circuit diagram showing a photodetector, which is anothermodified version of the inverter type photodetector shown in FIG. 7.

FIG. 23 is a circuit diagram showing a photodetector, which is amodified version of the example shown in FIG. 22.

FIG. 24 is a circuit diagram showing a biased inverter typephotodetector, which is a modified version of the example shown in FIG.8.

FIG. 25 is a circuit diagram showing a photodetector, which is amodified version of the example shown in FIG. 24.

FIG. 26 is a circuit diagram showing a photodetector, which is amodified version of the biased inverter type photodetector shown in FIG.8.

FIG. 27 is a circuit diagram showing a photodetector, which is amodified version of the example shown in FIG. 26.

FIG. 28 is a circuit diagram showing a photodetector, which is amodified version of the current mirror type photodetector shown in FIG.9.

FIG. 29 is a circuit diagram showing a photodetector, which is anothermodified version of the current mirror type photodetector shown in FIG.9.

FIG. 30 is a circuit diagram showing a photodetector, which is amodified version of the current mirror type photodetector shown in FIG.29.

FIG. 31 is a circuit diagram showing a photodetector, which is amodified version of the differential AMP-type photodetector shown inFIG. 10.

FIG. 32 is a circuit diagram showing a photodetector, which is anothermodified version of the differential AMP-type photodetector shown inFIG. 10.

FIG. 33 is a circuit diagram showing a photodetector, which is amodified version of the detector shown in FIG. 32.

FIG. 34 is a circuit diagram showing a photodetector, which is amodified version of the photodetector shown in FIG. 29.

FIG. 35 shows a sectional view for describing the device structure of adiode to be used as the light receiving element.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

FIG. 1 illustrates a SRAM type photodetector 100, which is a firstpreferred embodiment of the present invention. As shown in FIG. 1, theSRAM type photodetector 100 has a configuration similar to that of asix-transistor type SRAM memory cell. Thus, in the six-transistor typeSRAM memory cell having as its main component a static latch 120consisting of p-channel type MOS transistors 113 and 114 and n-channeltype MOS transistors 111 and 112, one of its input/output nodes isconnected to a power source potential VDD via an n-channel type transferMOS transistor MOS115, and the other input/output node is connected tothe ground potential VSS of the circuit via another n-channel typetransfer MOS transistor MOS116, the two transfer MOS transistors 115 and116 being configured as to be switch-controlled with a reset signalpassing a signal line 101.

A usual IC card is configured of a system on chip (SOC), consisting of acentral processing unit (CPU), a static random access memory (SRAM), aread only memory (ROM), an electrical erasable programmable ROM (EEPROM)and so forth integrated on a single chip. Therefore, it is possible tofabricate a SRAM in the manufacturing process for IC cards and, byarranging the SRAM type photodetector 100 in the SRAM area, the presenceof the photodetectors can be made inconspicuous. Needless to mention,the standby power consumption of the photodetector 100 is virtuallyzero.

The operation of the SRAM type photodetector 100 will be described.First at the time power supply to the IC card is turned on, the signalline 101 is linked to the reset signal. The reset signal passing thesignal line 101 is raised to a high level (Hi) by the power-on resettingfunction, and the transfer MOS transistors 115 and 116 are turned on. Asthe source of the transfer MOS transistor 115 is connected to the powersource potential VDD and that of the transfer MOS transistor 116 isconnected to the ground potential VSS, the potential of a sensor output102 is reset to a low level (Lo) and that of a node 103 to Hi. At thistime, the MOS transistors 111 and 114 are turned on, and the MOStransistors 112 and 113, turned off. Incidence of light on the MOStransistors 112 and 113 in the off state causes the MOS transistors 112and 113 to be turned on. If the number of incident photons issufficiently large and the resistances of the MOS transistors 112 and113 are less than those of the MOS transistors 111 and 114, the staticlatch 120 will be reversed, resulting in transition of the potential ofthe node 103 to Lo and that of the sensor output 102 to Hi. This actionenables the irradiation with light to be detected.

While FIG. 1 shows a photodetector based on a six-transistor type SRAMmemory cell, various other forms of the SRAM memory cell are proposedincluding a four-transistor type using a resistance load. Needless tomention, irrespective of the type of the SRAM memory cell, thephotodetector can have any configuration only if it satisfies thecondition that incidence of light on MOS transistors in an off statecauses the static latch 120 to be reversed.

If as many photons as those having come incident on the MOS transistors112 and 113 also come incident on the MOS transistors 111 and 114,currents will also flow to the MOS transistors 111 and 114 and make itdifficult for the static latch 120 to be reversed. A number of methodsare conceivable to prevent it. One is to cover the top layer of the MOStransistors 111 and 114 with metal. FIG. 2 shows a schematic layout ofthe SRAM type photodetector 100. Usually a six-transistor type SRAMmemory cell has such an arrangement as is shown in FIG. 2 to save thelayout area. By covering with metal the top layer of the hatched parts,it can be ensured that no photons come incident elsewhere than on theMOS transistors 112 and 113.

Instead of direct shading, the MOS transistors can be varied inphoto-sensitivity. FIG. 3 shows an the n-channel type MOS transistor 300in an off state. Reference numeral 301 denotes a p-type well diffusionregion; 302, a drain diffusion region; 303, a source diffusion region;304, a well power feed diffusion region; 311, a drain terminal; 312, agate terminal; 313, a source terminal; 314, a substrate terminal; and320, incident photons. The gate terminal 312, source terminal 313 andsubstrate terminal 314 are at the ground potential VSS, the drainterminal, at the power source potential VDD, and this MOS transistor 300is off.

When photons having sufficient come incident on a semiconductor pairedpositive holes and free electrons are generated. If paired positiveholes and free electrons are generated at a pn junction in a reverselybiased state, the generated carriers cause currents to flow also in areverse bias. Referring to FIG. 3, the pn junction of the p-type welldiffusion region 301 and the drain diffusion region 302 are reverselybiased. Therefore, a leak current resulting from the incidence ofphotons 320 on the n-channel type MOS transistor 300 in an off statemainly flows from the drain 311 to the substrate 314. While FIG. 3illustrates an n-channel type MOS transistor, the same is true of ap-channel type MOS transistor.

Then, the MOS transistors 112 and 113 are laid out to have greater draindiffusion areas. If expanding their drain diffusion areas results in agrater depletion layer region at the pn junction and if photons comeincident uniformly, the greater the drain areas, the greater the leakcurrent will be. Therefore, if the drain areas of the MOS transistors112 and 113 are laid out to be greater than those of the MOS transistors111 and 114, even if the light coming incident on the MOS transistors111 through 114 is the same, it will be easier for the static latch 120to be reversed.

Needless to mention, it is possible to combine shading with metal andexpanding the drain area.

FIG. 4 illustrates an example of arrangement in the SRAM typephotodetector 100. A SRAM block 400 on the IC card, as shown in FIG. 4,has a memory cell array 401, a redundant cell array 402, a the redundantprogram circuit 403, a row decoder 404, a column decoder 405, a columnswitch array 406, an error correcting code (ECC) circuit 407, a senseamplifier 408, a write amplifier 409 and a timing generator 410. Thememory cell array 401 has static memory cells arranged in a matrix, andthe selection terminals of the static memory cells are connected to wordlines WL row by row while the data input/output terminals of the staticmemory cells are connected to bit lines BL column by column. The rowdecoder 404 decodes a row address signal RADR to generate a word lineselection signal. Complementary bit lines BL are made connectable to acommon data line CD via a switch in the column switch array 406. Acolumn address decoder decodes a column address signal CADR to select acomplementary bit line BL to be made continuous to the common data lineCD by using a switch in the column switch array 406.

The sense amplifier 408 senses stored information read out of a memorycell to the common data line CD, and supplies it to the ECC circuit 407.The write amplifier 409 drives the common data line CD in accordancewith write information to a memory cell.

The ECC circuit 407 adds an error correaction code to write data fromoutside, and supplies the codes-augmented data to the write amplifier409 as write information. The ECC circuit 407 also enters readinformation read out of the sense amplifier 408 to the common data lineCD, judges whether or not there is any error in the read data by usingan error correaction code accompanying the read information and, if anyerror is found, supplies corrected data.

The redundant cell array 402 has redundant memory cells to substitutefor faulty bits in the memory cell array 401, and faulty bits are madereplaceable in word line units or complementary bit line units. Faultyaddresses to be replaced in word line units or complementary bit lineunits are set in the redundant program circuit 403, and a word line orbit line is replaced when its access address is found identical with anyof the faulty addresses that are set. No detailed explanation will bemade of the redundant configuration itself because it is already knownto those skilled in the art.

In the memory cell array 401 of FIG. 4, each unit square in the gridrepresents a SRAM static memory cell (hereinafter sometimes referred tosimply as SRAM cell). The shaded SRAM cells are replaced with SRAM typephotodetectors 100. By arranging the SRAM type photodetectors 100 atrandom as shown in FIG. 4, reverse engineering can be made moredifficult.

None of the SRAM type photodetectors 100 in the memory cell array 401 isconnected to either the word line or the bit line of any memory cell,but the photo-detection signals 102 are supplied outside the SRAM moduleusing a different signal wire from the bit line. Each of thephoto-detection signals 102 from the plurality of SRAM typephotodetectors 100 can be supplied outside via a wired OR connection oran OR gate.

A SRAM cell replaced by a SRAM type photodetector 100 can no longer beused as a memory cell, and this should create no problem to thefunctions of the SRAM. To prevent any such problem for occurring, theredundant cell array 402 and the redundant program circuit 403 forredundancy are utilized. Thus by replacing a memory cell in theredundant cell array 402 with a SRAM type photodetector 100, the SRAMtype photodetector 100 can be arranged without adversely affecting thefunctions of the SRAM. Alternatively, instead of using a configurationfor redundancy, by using the ECC circuit 407, any error that mayresulting from the lack of the memory cell can be corrected as the senseamplifier 408 would supply a Hi level or a Lo level though the bit linereplaced by the SRAM type photodetector 100 would become unstable at thetime of reading. This alternative can dispense with the substitution ofa photodetector element by using redundancy. Furthermore, replacement bythe SRAM type photodetector 100 would not affect relieving the memorycell from its defect. In order to make possible error correaction by theECC circuit, it is necessary for the SRAM type photodetectors 100 to bedistributively arranged so that the error correcting capacity of the ECCcircuit be not exceeded.

FIG. 5 shows a diodes-augmented SRAM type photodetector 500, which is asecond example. The diodes-augmented SRAM type photodetector 500consists of the MOS transistors 112 and 113 of the SRAM typephotodetector 100 with diodes 511 and 512 added in parallel. Whenshading is to be done, the diodes 511 and 512 should be exposed tolight. Though this is not an absolute requirement, the diode 511 shallbe composed of a p-type diffusion layer in an n-type well region, andthe diode 512, of an n-type diffusion layer in a p-type well region.

Description of the basic operation will be dispensed with because it issimilar to that of the SRAM type photodetector 100. The added diodes arepn junctions in parallel to the pn junctions of the drains andsubstrates of the MOS transistors 112 and 113. This configurationprovides the same effect as the MOS transistors 112 and 113 havingexpanded drain areas. The use of independent diodes serves to increasethe freedom of layout, and makes it possible to provide larger pnjunctions than what are made available by increasing the drain areas.Since there is no absolute need for the SRAM static latch 120 and thediodes to be arranged in close proximity to each other, the freedom oflayout can be further increase by laying out the diodes 511 and 512 fromeach other.

FIG. 6 shows a current limiters-augmented SRAM type photodetector 600,which is a third example. The current limiters-augmented SRAM typephotodetector 600 consists of the diodes-augmented SRAM typephotodetector 500 with current limiter MOS transistors 611 and 612 beingadded to the power source potential VDD and ground VSS of the SRAMlatch.

The operation of the current limiters-augmented SRAM type photodetector600 will be described. First, as in the SRAM type photodetector 100, thereset signal passing the signal line 101 is raised to Hi by the power-onresetting function, and the transfer MOS transistors 115 and 116 areturned on. As the source of the transfer MOS transistor 115 is connectedto the power source potential VDD and that of the transfer MOStransistor 116 is connected to the ground potential VSS, the potentialof the sensor output 102 is reset to Lo and that of the node 103 to Hi.At this time, the MOS transistors 111 and 114 are turned on and the MOStransistors 112 and 113, turned off. Incidence of light on the MOStransistors 112 and 113 in the off state causes the MOS transistors 112and 113 to be turned on. As the MOS transistors 111 and 114 are in theon state then, currents will flow to all the MOS transistors 111 through114 constituting the static latch 120, and a direct current is generatedin the static latch 120. The flow of the direct current causes the drainpotential of the current limiter MOS transistor 611 to rise and that ofthe current limiter MOS transistor 612 to fall. This effect causes thesource voltage supplied to the static latch 120 to fall, making iteasier for the latch to be reversed. That is to say, the sensitivity ofthe photodetector to the number of photons increases. While thephotosensitivities of the SRAM type photodetector 100 and of thediodes-augmented SRAM type photodetector 500 are basically adjusted byvarying the areas of pn junctions, that of this currentlimiters-augmented SRAM type photodetector 600 can be adjusted byvarying the current driving forces of the current limiter MOStransistors 611 and 612, and the designing is facilitated accordingly.

Configurations of photodetectors based on SRAM cells have been describedso far. SRAMs are used as work areas in an IC card, and often made thetargets of reverse engineering. It is therefore important to embedphotodetectors in a SRAM array and thereby to make reverse engineeringdifficult. Another conceivable way of reverse engineering is to induceerroneous actions in flip-flops in the CPU section. To guard against it,photodetectors complying with the requirements of standard logic cells(in terms of cell height, width and so forth) would be convenient. Ofcourse, there will be no problem if the SRAM type photodetectors arelaid out in compliance with the requirements of standard logic cells,but a circuit form better fitting standard logic cells, if any, would beeven better. The following description of a configuration of thephotodetector will presuppose a layout meeting the requirements ofstandard logic cells.

FIG. 7 shows an inverter type photodetector 700, which is a fourthexample. Reference numeral 701 denotes a negative logic enable signal;702, a detector output signal; 703, a sensor signal; 711, a sensitivityadjusting MOS transistor; 712, a photo-detecting MOS transistor; 713, anoutput inverter; VDD, a power source potential; and VSS, a groundpotential.

The inverter type photodetector 700 is actuated by a fall of thenegative logic enable signal 701 to Lo and the turning-on of thesensitivity adjusting MOS transistor 711. When no photons are comingincident, the photo-detecting MOS transistor 712 is off because its gateand source are short-circuited. Therefore, when no photons are comingincident, the sensor signal 703 is at the power source potential and thedetector output 702, at the ground potential VSS. When photons comeincident on the photo-detecting MOS transistor 712, a current flows andthe sensor signal 703 falls according to the ratio of the currentdriving force. When the number of photons reaches or surpasses a certainlevel and the potential of the sensor signal 703 falls below the logicalthreshold voltage of the output inverter 713, the detector output 702rises to Hi and light is detected.

FIG. 8 illustrates a biased inverter type photodetector 800, which is afifth example. Reference numeral 801 denotes a negative logic enablesignal; 802, a positive logic enable signal; 803, a bias node; 804, asensor signal; 805, a detector output signal; 811, 815 and 819,p-channel type current limiting MOS transistors; 814, 818 and 822,n-channel type current limiting MOS transistors; 813 and 821, n-channeltype sensitivity controlling MOS transistors; and 817, an n-channel typephoto-detecting MOS transistor. Of these elements, only thephoto-detecting MOS transistor 817 is exposed to light, and otherelements are masked with metal films. The W and L values of the MOStransistors here are designed to be 811=815=819, 812=816=820, 813=821and 814=818=822.

When the negative logic enable signal 801 is Hi and the positive logicenable signal 802 is Lo, the biased inverter type photodetector 800 isoff. The MOS transistors 811, 814, 815 and 818 prevent currents fromflowing, and the sensor signal 804 is pulled up by a MOS transistor 823,and the detector output signal 805 is fixed at the ground potential VSS.

When the negative logic enable signal 801 is switched to Lo and thepositive logic enable signal 802 to Hi, the biased inverter typephotodetector 800 is actuated, and the potential of the bias node 803 isdetermined by a negative feedback of a clocked inverter type biascircuit composed of the MOS transistors 811 through 814. As the W and Lvalues of the MOS transistors then are designed to be 811=819, 812=820,813=821 and 814=822, the potential of the bias node 803 is equal to thelogical threshold of an inverter composed of the MOS transistors 819through 822. Here again, if the MOS transistor 813 is designed to beequal to 817, the potential of the sensor signal 804 should be equal tothe potential of the bias node 803. The actual W/L values are set to behigher for the MOS transistor 813 than for 817. In order to eliminatethe impact of the short channel effect, it is preferable to equalize Lbetween the two MOS transistors and to give a greater W value to 813than to 817. This design results in a higher potential of the sensorsignal 804 than that of the bias node 803 because of the differencebetween the MOS transistors 813 and 817 in current driving force, andthe detector output signal 805 is thereby stabilized in the vicinity ofthe ground potential.

When photons come incident on the photo-detecting MOS transistor 817, aleak current generates between the drain and the substrate of thephoto-detecting MOS transistor 817. Then, as there arises an increase incurrent, the potential of the sensor signal 804 falls. The number ofphotons increases and, when the potential of the sensor signal 804becomes less than the logical threshold of an inverter composed of theMOS transistors 819 through 822, there occurs a transition of thedetector output signal to Hi.

A characteristic of this biased inverter type photodetector 800 consistsin the ease of adjustment of the sensitivity of photo-detection byproperly setting the W/L difference between the n-channel type MOStransistors 813 (=821) and 817. As long as this biased inverter typephotodetector 800 is operating, a current keeps on flowing, but thepower consumption can be reduced to a negligible level relative to thepower consumption of the whole IC card by setting low the W/L values ofthe p-channel type current limiting MOS transistors 811, 815 and 819 andof the n-channel type current limiting MOS transistors 814, 818 and 822.

FIG. 9 illustrates a current mirror type photodetector 900, which is asixth example. Reference numeral 901 denotes a negative logic enablesignal; 902, a positive logic enable signal; 903, a bias node; 904, asensor signal; 905, a detector output signal; 911, a p-channel typepower source MOS transistor; 913, an n-channel type bias MOS transistor;915 and 917, MOS transistors constituting current mirrors; 916, ann-channel type sensitivity adjusting MOS transistor; 919, an n-channeltype photo-detecting MOS transistor; 920 through 923, current limitinginverters; 912, an n-channel type pull-down MOS transistor; and 914 and918, p-channel type pull-down MOS transistors. Of these elements, onlythe photo-detecting MOS transistor 919 is exposed to light, and otherelements are masked with metal films.

When the negative logic enable signal 901 is Hi and the positive logicenable signal 902 is Lo, the current mirror type photodetector 900 isoff. the pull-down MOS transistor 912 prevents currents from flowing tothe MOS transistors 913, 916 and 919, the sensor signal 904 is pulleddown by the pull-down MOS transistor 918, and the detector output signal905 is fixed at the ground potential VSS.

When the negative logic enable signal 901 is switched to Lo and thepositive logic enable signal 902 to Hi, the current mirror typephotodetector 900 is actuated. The current flowing to the power sourceMOS transistor 911 flows to the bias MOS transistor 913 to determine thepotential of the bias node 903. If here the W and L values of thesensitivity adjusting MOS transistor 916 and of the photo-detecting MOStransistor 919 are the same, currents of the same amperage will flow tothe two MOS transistors, but actually the W level of the sensitivityadjusting MOS transistor is designed to be greater so that a current ofa greater amperage flow to the sensitivity adjusting MOS transistor 916.The amperage difference between the two MOS transistors is amplified bya current mirror active load composed of the MOS transistors 915 and917. If the channel length modulation coefficients of the MOStransistors 915 and 917 are sufficiently small, the sensor output 904will be stabilized in the vicinity of the power source potential VDD,and the detector output signal 905, in the vicinity of the groundpotential VSS.

When photons come incident on the photo-detecting MOS transistor 919, aleak current generates between the drain and the substrate of thephoto-detecting MOS transistor 919. Then, currents will increase. Whenthe current flowing to the photo-detecting MOS transistor 919 surpassesthat flowing to the sensitivity adjusting MOS transistor 916, thecurrent mirror active load functions to bring down the potential of thesensor signal 904 to the vicinity of the ground potential VSS. Thisresults in a transition of the detector output signal 905 to the Hilevel to enable irradiation with light to be detected.

The sensitivity of photo-detection by this the current mirror typephotodetector 900, too, can be readily adjusted by properly setting theW/L difference between the sensitivity adjusting MOS transistor 916 andthe photo-detecting MOS transistor 919. Although a current also keeps onflowing in this circuit as long as it is operating, the powerconsumption can be reduced to a negligible level relative to the powerconsumption of the whole IC card by appropriately adjusting the W/Lvalues of the bias circuit composed of the MOS transistors 911 and 913and of the MOS transistors 920 and 923 limiting the current flowing tothe output inverter.

FIG. 10 illustrates a differential AMP-type photodetector 1000, which isa seventh example. Reference numeral 1001 denotes a negative logicenable signal; 1002, a positive logic enable signal; 1003, a bias node;1004, a sensor signal; 1005, a detector output signal; 1011, a p-channeltype power source MOS transistor; 1013, an n-channel type bias MOStransistor; 1024, an n-channel type power source MOS transistor; 1015and 1017 MOS transistors constituting a current mirror load; 1016, ann-channel type sensitivity adjusting MOS transistor; 1019, an n-channeltype photo-detecting MOS transistor; 1020 through 1023, current limitinginverters; 1012, an n-channel type pull-down MOS transistor; and 1014and 1018, p-channel type pull-down MOS transistors. Of these elements,only the photo-detecting MOS transistor 1019 is exposed to light, andother elements are masked with metal films.

When the negative logic enable signal 1001 is Hi and the positive logicenable signal 1002 is Lo, the differential AMP-type photodetector 1000is off. The pull-down MOS transistor 1012 prevents a current fromflowing to power source MOS transistor 1024, the sensor signal 1004 ispulled up by the pull-up MOS transistor 1018, and the detector outputsignal 1005 is fixed at the ground potential VSS.

When the negative logic enable signal 1001 is switched to Lo and thepositive logic enable signal 1002 to Hi, the differential AMP-typephotodetector 1000 is actuated. The current flowing to the power sourceMOS transistor 1011 flows to the bias MOS transistor 1013 to determinethe potential of the power source MOS transistor 1024 by the currentmirror. If here the W and L values of the sensitivity adjusting MOStransistor 1016 and of the photo-detecting MOS transistor 1019 are thesame, currents of the same amperage will flow to the two MOStransistors, but actually the W level of the sensitivity adjusting MOStransistor is designed to be greater so that a current of a greateramperage flow to the sensitivity adjusting MOS transistor 1016. Theamperage difference between the two MOS transistors is amplified by acurrent mirror active load composed of the MOS transistors 1015 and1017. If the channel length modulation coefficients of the MOStransistors 1015 and 1017 are sufficiently small, the sensor output 1004will be stabilized in the vicinity of the power source potential VDD,and the detector output signal 1005, in the vicinity of the groundpotential VSS.

When photons come incident on the photo-detecting MOS transistor 1019, aleak current generates between the drain and the substrate of thephoto-detecting MOS transistor 1019. Then, currents will increase. Whenthe current flowing to the photo-detecting MOS transistor 1019 surpassesthat flowing to the sensitivity adjusting MOS transistor 1016, thecurrent mirror active load functions to bring down the potential of thesensor signal 1004 to the vicinity of the ground potential VSS. Thisresults in a transition of the detector output signal 1005 to the Hilevel to enable irradiation with light to be detected.

This differential AMP-type photodetector 1000, like the current mirrorAMP-type photodetector 900, is characterized by the ease of adjustingphoto-sensitivity by properly setting the W difference between thesensitivity adjusting MOS transistor 1016 and the photo-detecting MOStransistor 1019. An advantage over the current mirror AMP-typephotodetector 900 and others is the higher drain potential of thephoto-detecting MOS transistor 1019. Each photodetector detects theincidence of light by detecting the leak current generating in the pnreverse bias between the drain and the substrate of the photo-detectingMOS transistor. If the drain potential is low, the electric field in thedepletion layer will be weak, and the probability for the pairedpositive holes and free electrons generated by the incidence of photonsto become recombined before passing the depletion layer will increase.The differential AMP-type photodetector 1000 strengthens the electricfield between the drain and the substrate of the photo-detecting MOStransistor 1019 and increase photo-sensitivity by raising the drainpotential between the drain and the substrate. Also in the differentialAMP-type photodetector 1000, a current keeps on flowing as long as it isoperating, the power consumption can be reduced to a negligible levelrelative to the power consumption of the whole IC card by appropriatelyadjusting the W/L values of the bias circuit composed of the MOStransistors 1011 and 1013 and of the MOS transistors 1020 and 1023limiting the current flowing to the output inverter.

FIG. 11 illustrates a modified version of the biased inverter typephotodetector 800 shown in FIG. 8. A biased inverter type photodetector800A shown in FIG. 11 permits adjustment of the current power capacityof the element for sensitivity control. Thus, it differs from theconfiguration shown in FIG. 8 that a series circuit of a sensitivitycontrolling MOS transistor 813 a and a current limiting MOS transistor814 a, another of a sensitivity controlling MOS transistor 813 b and acurrent limiting MOS transistor 814 b and still another of a sensitivitycontrolling MOS transistor 813 c and a current limiting MOS transistor814 c are arranged in parallel. The W and L values of the MOStransistors are such as 814 a=814 b=814 c=814. The L values of the MOStransistors 813 a, 813 b and 813 c are the same as that of the MOStransistor 817, and W_(813a), W_(813b) and W_(813c) of the MOStransistor 813 a, 813 b and 813 c are set relative to W₈₁7 of the MOStransistor 817 to be, for instance, W_(813a)=3·W₈₁₇/4,W_(813b)=1·W₈₁₇/8, and W_(813c)=1·W₈₁₇/16. When the control signal 802is raised to Hi to make the biased inverter type photodetector 800operable, the current drive capacity of the element for sensitivitycontrol differs depending on which of selection signals 804 a, 804 b and804 c is raised to Hi, making it possible to set as desired thedifference in initial potential of the sensor signal 804 relative to thebias node 803. The selection signals 804 a, 804 b and 804 c can bedetermined with the value of a register (not shown). This facilitatescorreaction or optimization of the detection sensitivity.

FIG. 12 illustrates a microcomputer for IC card use (hereinaftersometimes referred to simply as IC card microcomputer) as asemiconductor integrated circuit for IC card use. Here is described howthe various photodetectors are applied to the IC card microcomputer.Reference numeral 1100 denotes an integrated circuit module (ICM) of anIC card, such as an IC card microcomputer; 1101, a power sourceterminal; 1102, a ground terminal; 1103, a clock input terminal; 1104and 1105, I/O terminals; 1111, a power source block; 1112, aphase-locked loop (PLL) block; 1113, a CPU-containing logic circuitblock; 1114, an interface block; 1115, a SRAM; 1116, a ROM; 1117, anEEPROM; and 1121, an internal data bus.

The ROM 1116 holds a CPU control program in the CPU-containing logiccircuit block 1113, and the EEPROM 1117 holds control data and the likerewritably. The SRAM 1115 is used as a work area or the like for the CPUin the CPU-containing logic circuit block 1113. The PLL 1112 generatesan internal clock on the basis of an external supplied from the clockinput terminal 1103.

Since none of the individual external terminals of an IC card is usuallyrequired to be adaptive to high speed, the IC card microcomputer uses aninterface working on a traditional 5 V power supply. For this reason,the IC card microcomputer 1100 is supplied with 5 V power. However,since 5 V power is too high for an IC even finer than a deep submicronprocess, there will be needed a step-down power source for supplyingeach circuit with power of an appropriate voltage. Furthermore, as theEEPROM 1117 requires a voltage higher than 5V and lower than the groundpotential for erasing/writing data in or into the memory, step-up powersource/negative voltage power supply circuits each using a charge pumpor the like will be needed. A block putting together power supplycircuits is the power source block 1111. The power source block 1111 isconfigured mainly of analog circuits. For this reason, the biasedinverter type photodetector 800, the current mirror type photodetector900, the differential AMP-type photodetector 1000 and so forth mentionedabove can be incorporated inconspicuously. “Inconspicuous” here meansdifficulty to distinguish photodetectors of a circuit configuration inwhich a constant current is let flow inserted therein from other circuitconfigurations around because of their analog circuitry.

Since the CPU-containing logic circuit block 1113 is built into the ICcard microcomputer 1100, the PLL block 1112 is required. As the PLLblock 1112 has an analog circuit configuration, it allows the biasedinverter type photodetector 800, the current mirror type photodetector900, the differential AMP-type photodetector 1000 and the like to beincorporated inconspicuously.

Since the CPU-containing logic circuit block 1113 and the interfaceblock 1114 are configured mainly of digital circuits, it is appropriateto use the inverter type photodetector 700. “Appropriate” here meansthat the insertion of the photodetector of a push-pull configuration isdifficult to distinguish from other circuit configurations aroundbecause of their digital circuitry.

As the SRAM 1115, the ROM 1116 and the EEPROM 1117 are memory elements,it is appropriate to use the SRAM type photodetector 100, thediodes-augmented SRAM type photodetector 500, the currentlimiters-augmented SRAM type photodetector 600 and the like.“Appropriate” here means that, because the photodetectors have a circuitconfiguration resembling that of memory cells, they cannot be easilydistinguished from the memory cells around. Although it is notappropriate to let the ROM 1116 and the EEPROM 1117 be mixed in thememory array because their memory cell configurations are different fromthat of the SRAM, the buffer for temporarily storing data to be writteninto memory cells or data read out of memory cells can be configured asSRAM memory cells, among which SRAM type photodetectors can be presentmixed with others.

Photo-detection signals provided by various photodetectors give, forinstance logical sums, and a logical signal is considered on of thereset signals (master reset signals) of the IC card microcomputer. Thismakes it impossible, even data collection for reverse engineering isattempted by irradiation with light, to cancel the reset because IC cardmicrocomputer is subjected to master resetting and returned to itsinitial state every time. As a result, any attempt at illegitimate datacollection by irradiation with light would stop the operation of the ICcard, and statistical analysis of the cryptographic key or the like canbe thereby prevented.

In this way, reverse engineering can be prevented more effectively byincorporating different kinds of photodetectors to match thecharacteristics of the circuit block.

Various methods are conceivable for incorporating the photodetectors. Afirst preferable method is to incorporate them into gaps created by thearrangement of elements, and a second is to incorporate them in agrid-shaped pattern.

FIG. 13 shows a layout of a typical state in which photodetectors areincorporated into gaps in the element arrangement of functional blocks.For instance, one functional block 1604 is so arranged to enable firstbasic cells 1601 which may be D-type latch circuits, second basic cells1602 which may be NAND gates and third basic cells 1603 which may beinverters to perform their respective functions, and a photodetector1301 is arranged in the resultant gap. Generally speaking, digitalcircuits are caused to configure a functional block 1604 by arrangingbasic cells 1601, 1602 and 1603. While the heights of the basic cells1601 through 1603 are equalized to facilitate their arrangement, thecells differ in width, resulting in inevitable gaps when configuring afunctional block. Usually, either nothing is arranged in such gaps orgap cells are arranged therein. By arranging therein photodetectors1301, the photodetectors 1301 can incorporated into many functionalblocks without increasing the square measure.

FIG. 14 shows a layout of a typical state in which photodetectors areincorporated into functional blocks in a grid-shaped pattern. Thephotodetectors 1301 are arranged in advance in functional blocks 1704which should be protected from reverse engineering with particular care.The arrangement for that purpose here is in a grid shape. By thistechnique, since basic cells 1601 through 1603 are arrangement in gapsbetween photodetectors 1301, there are formed many cell gaps 1701, butthis arrangement is superior in its capability to prevent reverseengineering because the density of the photodetectors 1301 can beadjusted.

FIG. 15 illustrates a typical basic cell in which a photo-detectingcircuit is incorporated with a D-type flip-flop. If prevention ofreverse engineering is to be given particular priority, photodetectorscan be incorporated in advance into basic elements (flip-flop, NAND,NOR, inverter and so forth) of the logic circuit, and their use wouldfacilitate arrangement of photodetectors in high density.

The basic cell 1501 of which an example is shown in FIG. 15 is matchedto a basic element of a D-type flip-flop, and consists of a D-typeflip-flop 1502, a photo-detecting circuit 1301 and a wired OR couplingelement 1302. The photodetector to be used in this case consumes almostno electric power, and therefore serves to keep the square measuresmall. Since the inverter type photodetector 700 is the most suitable inthis respect, the inverter type photodetector 700 will be used as thephoto-detecting circuit 1301. The drain of the wired OR coupling element1302 may be coupled to the drain of the wired OR coupling elementprovided in some other basic cell.

FIG. 16 shows an example of an IC card microcomputer to which voltagedetecting, frequency detecting and wiring cutoff detecting functions areadded to the photo-detection function by a photodetector. It differsfrom the configuration shown in FIG. 12 in that a voltage detectingcircuit 1201, a frequency detecting circuit 1202, a wiring cutoffdetecting circuit 1203 and active shield wiring (in a rigid framepattern) 1204 are added.

The voltage detecting circuit 1201 detects any fall beyond a prescribedlimit in internal operating power supply generated by a power sourceblock 1111. The voltage detecting circuit 1201 is used for anyanticipated reengineering analysis done by applying an abnormalstepped-down voltage to an internal power supply node via a probethereby giving rise to an abnormal operation, and for detecting it.

The frequency detecting circuit 1202 detects any surpassing of aprescribed by the frequency of an internal clock generated by the PLL1112. The frequency detecting circuit 1202 is used for any anticipatedreengineering analysis done by applying an abnormally high frequency toan internal clock supplying node via a probe thereby giving rise to anabnormal operation, and for detecting it.

The wiring cutoff detecting circuit 1203 detects any cutoff of theactive shield wiring (in a rigid frame pattern) 1204 arranged on thesurface of the IC card microcomputer. The active shield wiring 1204 isso laid, as shown in FIG. 17 by way of example, as to draw a finepattern all over the surface of the IC card microcomputer. If it isattempted to remove the surface protective film or the like of the ICcard microcomputer to bring a probe into contact with an internal nodeof the IC card microcomputer, the active shield wiring (in a rigid framepattern) 1204 will also be cut off, and it is intended to detect thiscutoff.

FIG. 18 illustrates an example of circuit configuration for integrallygenerating a reset signal in response to photo-detection by aphotodetector, voltage detection, frequency detection and wiring cutoffdetection. Reference numeral 1301 denotes a photo-detecting circuitwhich generically represents many different forms of photo-detectingcircuit; 1302, a wired OR element, such as a MOS transistor, forreceiving at its selection terminal a detection signal from thephoto-detecting circuit 1301; 1308, another wired OR element, such as aMOS transistor, for receiving at its selection terminal a detectionsignal from the voltage detecting circuit 1201; 1309, still anotherwired OR element, such as a MOS transistor, for receiving at itsselection terminal a detection signal from the frequency detectingcircuit 1202; 1303, a reset circuit; 1304, a reset signal; 1305, apull-down resistor; 1306, a pull-up resistor; and 1204, the activeshield wiring. The wired OR elements 1301, 1308 and 1309, the pull-upresistor 1306, the pull-down resistor 1305, and the active shield wiring1204 are commonly connected to wiring 1307.

As the pull-up resistor 1306 is weaker in resistance than the pull-downresistor 1305, the potential of the wiring 1307 is in the vicinity ofthe power source voltage VDD. When any of the photo-detecting circuits1301 detects the incidence of light, the wired OR element 1302 is turnedon; when the voltage detecting circuit 1201 detects any abnormality ofinternal voltage, the wired OR element 1308 is turned on; and when thefrequency detecting circuit 1202 detects any abnormality of frequency,the wired OR element 1309 is turned on. When any of the wired ORelements is turned on, the potential of the wiring 1307 falls to thevicinity of the ground VSS. This is detected by the reset circuit 1303;the reset signal 1304 is asserted; and the IC card microcomputer isinitialized. Even if the wiring 1307 or the active shield wiring 1204 iscut off, the effect of the pull-down resistance 1305 serves to cause thepotential of the wiring 1307 to the vicinity of the ground VSS, andsimilarly the IC card microcomputer is initialized. The resetinstruction is not cancelled, and the operation of the IC card isstopped.

Further, where a metal foil for shading is to be formed over the toplayer of the MOS constituting the photodetector element shown in FIG. 2,it may be accomplished by using active shield wiring or some other wayof wiring. In such a case, as the wiring width would be usually narrowrelative to the size of the MOS, the intensity of light can bedifferentiated by making dense the wiring over the MOS top layer to beshaded and making sparse the wiring over the MOS top layer not to beshaded.

FIG. 19 is a plan of a typical appearance of an IC card 1130 of acontact interfacing type. On the surface of a card substrate 1131consisting of synthetic resin, an external terminal 1132 formed of anelectrode pattern as an external interfacing section is exposed, thoughthis is not an absolute requirement, and the IC card microcomputer 1100,examples of which were shown in FIG. 12 and FIG. 16 referred to above,is embedded therein. To the electrode pattern is coupled thecorresponding external terminal of the IC card microcomputer 1100.

FIG. 20 is a plan of a typical appearance of an IC card 1134 of anon-contact interfacing type. In a card substrate 1135 consisting ofsynthetic resin, an antenna 1136 as an external interfacing section isembedded, though this is not an absolute requirement, and the IC cardmicrocomputer 1100, examples of which were shown in FIG. 12 and FIG. 16referred to above, is embedded therein. In this example, the IC cardmicrocomputer 1100 has a high frequency section in the interface block1114, and the antenna 1136 is coupled to this high frequency section.

Where the IC card 1130 or 1134 is to be used in an electronic moneysystem, for instance a cryptographic key, monetary sum information andso forth are stored into the EEPROM 1117 in an encrypted form; whenelectronic money is to be used, the cryptographic key and monetary suminformation are decrypted; the legitimacy of the intended use is judgedaccording to the decrypted information and, if it is found legitimate,the required sum is remitted to the bank or is transferred to another ICcard.

Where the IC card 1130 or 1134 is mounted on a mobile telephone for use,the user's telephone number, ID number, fee charge information and thelike are stored in the EEPROM 1117 in an encrypted form; when thetelephone is to be used, those items of information are decrypted; thelegitimacy of the intended use is judged according to the decryptedinformation; if it is found legitimate, the fee charge information isupdated according to the number of calls made, and the information isencrypted again.

The IC cards 1130 and 1134 described above can provide protection fromhacking of data such as a cryptographic key by enforced resetting by theIC card microcomputer 1100 triggered by photo-detection, and therebyprevent damage to the user.

FIG. 21 shows a photodetector 700A, which is a modified version of theinverter type photodetector 700 shown in FIG. 7. In the circuit of FIG.7, the pn junction of the drain in the photo-detecting MOS transistor712 is used as the light receiving element, which is replaced by the pnjunction of a diode 1812 in the photodetector 700A. When the reverselybiased diode 1812 is irradiated with light, as in the case where thedrain is used, a leak current generates.

When the negative logic enable signal rises to Hi, the potential 703 ofthe output rises to the power source potential VDD. The potential of thedetector output signal 702 then is the ground potential VSS. When thediode 1812 is irradiated with light, a leak current generates and, ifthe intensity of the light is sufficiently great and the amperage of theleak current surpasses the current driving force of the sensitivityadjusting MOS transistor 711, the sensor output signal 703 will fallbelow the logical threshold of the output inverter 713, with thedetector output 702 rising to Hi.

FIG. 22 shows a photodetector 700B, which is another modified version ofthe inverter type photodetector 700 shown in FIG. 7. The differences arethat a MOS transistor 1911 for sensitivity adjustment is configured in ap-channel type and that the photo-detecting MOS transistor is configuredin an n-channel type.

When a positive logic enable signal 1901 rises to Hi, a potential 1903falls to the ground potential VSS. The potential of a detector outputsignal 1902 then is the ground potential VSS. When the drain of the MOStransistor 1911 in an off state is irradiated with light, a leak currentgenerates and, if the intensity of the light is sufficiently great andthe amperage of the leak current surpasses the current driving force ofa MOS transistor 1912, the potential 1903 will rise above the logicalthreshold of a buffer 1913, with the detector output 1902 rising to Hi.

FIG. 23 shows a photodetector 700C, which is a modified version of theexample shown in FIG. 22. The MOS transistor 1911 used as the lightreceiving element in the example of FIG. 22 is replaced with a diode2011. As the mode of basic operation of the diode 2011 is the same aswhat was described with reference to FIG. 21, its detailed descriptionis dispensed with here.

FIG. 24 shows a biased inverter type photodetector 800B, which is amodified version of the biased inverter type photodetector 800 shown inFIG. 8. In the circuit shown in FIG. 8, the pn junction of the drain inthe photo-detecting MOS transistor 817 is used as the light receivingelement, which is replaced by the pn junction of a diode 2110 in FIG.24. The diode 2110 is connected in a reversely biased state between theoutput 804 and the ground potential VSS of the circuit.

As the current driving forces of the MOS transistor 813 and the MOStransistor 817 are so set as the MOS transistor 813>the MOS transistor817, the potential of the sensor signal 804 is higher than the logicalthreshold of the inverter configured of the MOS transistors 819 through822. When the diode 2110 here is irradiated with light, a leak currentgenerates and, if the intensity of the light is sufficiently great andthe amperage of the leak current is sufficiently great, the potential ofthe sensor signal 804 will fall below the logical threshold of theinverter configured of the MOS transistors 819 through 822, with thedetector output 805 rising from the vicinity of the ground potential tothat of the power source potential VDD to make possible detection of theirradiation with light.

FIG. 25 shows a photodetector 800C, which is a modified version of theexample shown in FIG. 24. The difference consists in that the diode 2110added in the configuration of FIG. 22 is arranged between the source ofthe MOS transistor 817 and the ground potential VSS of the circuit. Asthe mode of basic operation of the diode 2011 is the same as what wasdescribed with reference to FIG. 24, its detailed description isdispensed with here.

FIG. 26 shows a photodetector 800D, which is a modified version of thebiased inverter type photodetector 800 shown in FIG. 8. Herein, out ofan inverter configured of a p-channel type MOS transistor 2216 and ann-channel type MOS transistor 2217, the MOS transistor 2216 is used asthe photo-detecting MOS transistor, and a MOS transistor 2223 forpulling down the sensor output is adopted in place of the pull-up MOStransistor 823.

While the current driving forces of the MOS transistors in FIG. 8 wassuch as the MOS transistor 812=the MOS transistor 816 and the MOStransistor 813>the MOS transistor 817, they are so set in the circuit ofFIG. 26 as the MOS transistor 812>the MOS transistor 2216 and the MOStransistor 813=the MOS transistor 2217. Therefore, the potential of thesensor signal 804 is lower than the logical threshold of an inverterconfigured of the MOS transistors 819 through 822. When the MOStransistor 2216 used here as the light receiving element is irradiatedwith light, a leak current generates and, if the intensity of the lightis sufficiently great and the amperage of the leak current issufficiently high, the potential of the sensor signal 804 will riseabove the logical threshold of an inverter configured of the MOStransistors 819 through 822, with the detector output signal 2201 risingfrom the vicinity of the ground potential VSS to that of the powersource potential VDD, thereby enabling the irradiation with light to bedetected.

FIG. 27 shows a photodetector 800E, which is a modified version of theexample shown in FIG. 26. Herein, instead of the MOS transistor 2216used as the light receiving element, a diode 2310 is added as the lightreceiving element. Description of the operation will be dispensed with.Though not shown, the connection of the diode 2310, as in FIG. 25, canbe altered to a form in which it is connected in a reversely biasedstate between the source of the MOS transistor 2216 and the sourcevoltage VDD.

FIG. 28 shows a photodetector 900A, which is a modified version of thecurrent mirror type photodetector 900 shown in FIG. 9. A differenceconsists in that, instead of the MOS transistor 919 used as the lightreceiving element in the circuit shown in FIG. 9, a diode 2410 is addedas the light receiving element. The diode 2410 is connected in areversely biased state (reverse direction connection state) to the MOStransistor 916 in parallel.

As the current driving forces of the MOS transistor 916 and the MOStransistor 919 are set to be the MOS transistor 916>the MOS transistor919, the potential of the sensor signal 904 is higher than the logicalthreshold of an inverter configured of the MOS transistors 920 through923. When the diode 2410 is irradiated with light, a leak currentgenerates and, if the intensity of the light is sufficiently great andthe amperage of the leak current is sufficiently high, the potential ofthe sensor signal 904 will fall below the logical threshold of aninverter configured of the MOS transistors 920 through 923, with thedetector output 905 rising from the vicinity of the ground potential VSSto that of the power source potential VDD, thereby enabling theirradiation with light to be detected.

FIG. 29 shows a photodetector 900B, which is another modified version ofthe current mirror type photodetector 900 shown in FIG. 9. Thedifference from the configuration shown in FIG. 9 is that theconductivity types (p-type and n-type) of the MOS transistors areinterchanged. While a relationship of the MOS transistor 916>the MOStransistor 919 was set regarding the current driving forces of the MOStransistors 916 and 919 in the circuit of FIG. 9, a similar relationshipof the MOS transistor 2516>the MOS transistor 2519 is also set in thecircuit of FIG. 29. Therefore, the potential of a sensor signal 2504 islower than the logical threshold of an inverter configured of MOStransistors 2520 through 2523. If here a MOS transistor 519 used as thelight receiving element is irradiated with light, a leak currentgenerates and, if the intensity of the light is sufficiently great andthe amperage of the leak current is sufficiently high, the potential ofthe sensor signal 2504 will rise above the logical threshold of aninverter configured of the MOS transistors 2520 through 2523, with thedetector output 2206 rising from the vicinity of the ground potentialVSS to that of the power source potential VDD, thereby enabling theirradiation with light to be detected.

FIG. 30 shows a photodetector 900C, which is a modified version of thecurrent mirror type photodetector 900B shown in FIG. 29. The differenceconsists in that, instead of the MOS transistor 2519 used as the lightreceiving element in the circuit shown in FIG. 29, a diode 2610 is addedas the light receiving element. The diode 2610 is connected in areversely biased state (reverse direction connection state) to the MOStransistor 2516 in parallel. As the mode of basic operation the same aswhat was described with reference to FIG. 28, its detailed descriptionis dispensed with here.

FIG. 31 shows a photodetector 1000A, which is a modified version of thedifferential AMP-type photodetector 1000 shown in FIG. 10. In thephotodetector 1000A shown in FIG. 31, instead of the MOS transistor 1019used as the light receiving element in the configuration of FIG. 10, adiode 2710 is added as the light receiving element. As the currentdriving forces of the MOS transistor 1016 and the MOS transistor 1019are set to be the MOS transistor 1016>the MOS transistor 1019, thepotential of the sensor signal 1004 is higher than the logical thresholdof an inverter configured of the MOS transistors 1020 through 1023. Whenthe diode 2710 here is irradiated with light, a leak current generatesand, if the intensity of the light is sufficiently great and theamperage of the leak current is sufficiently high, the potential of thesensor signal 1004 will fall below the logical threshold of an inverterconfigured of the MOS transistors 1020 through 1023, with the detectoroutput 1005 rising from the vicinity of the ground potential VSS to thatof the power source potential VDD, thereby enabling the irradiation withlight to be detected.

FIG. 32 shows a photodetector 1000B, which is a modified version of thedifferential AMP-type photodetector 1000A shown in FIG. 10. A differencefrom the configuration shown in FIG. 31 is that the conductivity types(p-type and n-type) of the MOS transistors are interchanged. While thecurrent supply capacities of the circuit of FIG. 10 was set to be theMOS transistor 1016>the MOS transistor 1019, the current drivecapacities in the circuit of FIG. 32 are similarly set to be the MOStransistor 2816>the MOS transistor 2819. Therefore, the potential of asensor signal 2804 is lower than the logical threshold of an inverterconfigured of MOS transistors 2820 through 2823. When the MOS transistor2819 here used as the ht receiving element is irradiated with light, aleak current generates and, if the intensity of the light issufficiently great and the amperage of the leak current is sufficientlyhigh, the potential of the sensor signal 2804 will rise above thelogical threshold of an inverter configured of the MOS transistors 2820through 2823, with the detector output 2806 rising from the vicinity ofthe ground potential VSS to that of the power source potential VDD,thereby enabling the irradiation with light to be detected.

FIG. 33 shows a photodetector 1000C, which is a modified version of thecircuit configuration shown in FIG. 29 is that, instead of the MOStransistor 2819 used as the light receiving element therein, a diode2910 is added as the light receiving element. The diode 2910 isconnected in a reversely biased state (reverse direction connectionstate) to the MOS transistor 2819 in parallel. As the mode of basicoperation the same as what was described with reference to FIG. 29, itsdetailed description is dispensed with here.

FIG. 34 showing a photodetector 900D, which is a modified version of thephotodetector shown in FIG. 29. Where the light receiving element isindependent as in FIG. 29, it is possible to arrange a diode away fromother elements. In that case, as typically shown in FIG. 34, it ispossible to have a plurality of diodes 2610_1 through 2610_3 as lightreceiving elements. As a single photodetector per se 900 cor sufficeseven though there are a plurality of diode as light receiving elements,the circuit area can be kept small and power consumption can be saved.If at least one of the diodes 2610_1 through 2610_3 as the lightreceiving elements irradiated with light, it will react to theirradiation and detect the light.

Further in order to check whether of not the photodetector per se 900cor operates correctly, it is advisable to connected a testing circuit3010 as illustrated. It is possible to simulate a state in which asensor has reacted by having the testing circuit 3010 discharge acurrent, and thereby to check whether or not the photodetector per seoperates correctly. To add, any of the circuits shown in FIG. 21, FIG.23, FIG. 24, FIG. 27, FIG. 28, FIG. 31 and FIG. 33 can adopt in asimilar configuration of a plurality of diodes and a singlephotodetector per se.

FIG. 35 shows the configuration of a device section of a diode to beused as the light receiving element. The element known as a diode can beconfigured anywhere only if a p-type semiconductor and an n-typesemiconductor are junctioned with each other. For instance, the pnjunction of a p-type substrate 3110 and an n-type diffusion layer 3120for power source separation can be used as a diode. Other combinationsusable as diodes include (1) an n-type diffusion layer 3120 for powersource separation and a p-type well region (P-WELL) 3130, (2) p-WELL3130 and an N⁺ diffusion layer 3140, and (3) n-WELL 3150 and a P⁺diffusion layer 3160. Thus a diode is nothing but a pn junction, andeven if it is part of some other element, it can be covered by theconcept of diode. Further by configuring a diode by utilizing adiffusion layer immediately below an element not formed over a siliconsubstrate, such as a capacitor or a resistor, an increase in squaremeasure due to the addition of a diode or diodes can be restrained.

Although the invention made by the present inventor has been describedin specific terms with reference to preferred embodiments thereof,obviously the invention is not confined to these embodiments, but can bevaried in many different ways without deviating from its essentials.

For instance, photodetectors mainly consisting of static latches can aswell be arranged in a non-SRAM memory array. The circuit module providedin the IC card microcomputer is not confined to what was described withreference to FIG. 12 and other drawings, but some other circuit module,such as a timer counter, can be mounted as well. The invention can beextensively applied to other semiconductor integrated circuits of asystem-on-chip configuration then IC card microcomputers. To add, thetechnical means of shading with metal and increasing the drain area canalso be applied to photodetectors for general photo-detecting purposesthan the photodetectors according to the invention.

1-36. (canceled)
 37. A semiconductor integrated circuit comprising:photodetectors each including a first circuit having a photo-detectingsemiconductor element on a current path, and a second circuit fordetecting the output node level said first circuit, wherein the outputnode of said first circuit strides over the logical threshold of thesecond circuit in accordance with a current varying when saidphoto-detecting semiconductor element is irradiated with light, a metalfilm or polysilicon film for shading the upper layers of othersemiconductor elements than said photo-detecting semiconductor elementis provided, and wherein photo-detection by said photodetectors is usedfor stopping internal actions.